3-32 characters: letters, numbers, dot, dash, underscore.

Minimum 8 characters. Hashed with Argon2id on the server.